GRC & Cyber Risk Leader - Biotech

Alnylam Pharmaceuticals; Cambridge (MA); Hybrid; USD 229,500 - 310,500; Full time

Benefits offered by this job

Comprehensive medical, dental, and vision coverage

Flexible spending and health savings accounts

401(k) with company match

Paid time off and wellness days

Generous family resources and leave

Job summary

Alnylam Pharmaceuticals is seeking a Senior Director of Governance, Risk & Compliance to lead and mature our GRC capabilities in Cambridge, MA. This hybrid role involves strategic leadership alongside hands-on execution, managing risk and compliance for a major biotech organization.

The ideal candidate will possess deep regulatory knowledge and strong communication skills for executive engagement. With 15+ years in cybersecurity and risk management, you will drive the maturity of our enterprise GRC program and align it with our business priorities.

Qualifications

• 15+ years of progressive experience in cybersecurity, risk management, compliance, or audit.
• 10+ years of leadership experience building and leading GRC, risk, or compliance teams.
• Deep knowledge of GRC programs in regulated environments such as biotech, pharma.

Responsibilities

• Lead and evolve Alnylam's enterprise GRC program.
• Establish and maintain security governance frameworks, policies, standards.
• Ensure security policies align with validated system constraints and readiness.

Skills

Cybersecurity

Risk Management

Regulatory Compliance

Leadership

Strategic Planning

Stakeholder Management

Education

Bachelor's degree in a relevant field

Advanced degree (MBA, Master's, JD)

Tools

NIST CSF

NIST 800-53

ISO 27001

Job description

Alnylam Pharmaceuticals is seeking a Senior Director of Governance, Risk & Compliance to lead and mature our GRC capabilities in Cambridge, MA. This hybrid role involves strategic leadership alongside hands-on execution, managing risk and compliance for a major biotech organization.

The ideal candidate will possess deep regulatory knowledge and strong communication skills for executive engagement. With 15+ years in cybersecurity and risk management, you will drive the maturity of our enterprise GRC program and align it with our business priorities.